feat(menu): System › Rollback — desktop generations picker (item 9b, item 9 done)

Undo is one menu away: the new rollback flow lists the last ten Home
Manager generations (the theme/config history is already generations,
newest marked current) and activates the picked one in a terminal —
HM's supported rollback, reversible by re-picking a newer one, so no
typed-yes gate. System-level undo deliberately links out rather than
reimplementing destructive flows in rofi: the Snapshots row opens the
existing gated flow, and 'boot an older generation (how)' fires an
instruction notification pointing at docs/RECOVERY.md §3 (which now
cross-references the menu path).

V1: template-home built, generated menu bash -n clean, row rendering
and pick-parsing verified against fixture generations output. V3
exercise queued.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

agent/JOURNAL.md

@@ -17,6 +17,24 @@ Template:
 
 ---
 
+## 2026-07-04 — System › Rollback menu (iteration #19, item 9b → item 9 done)
+- **Task:** BACKLOG NEXT#9 half (b) — undo one menu away.
+- **Did:** new `rollback` case in nomarchy-menu (System submenu row):
+  lists the last 10 `home-manager generations` (newest marked current),
+  picking one activates it in a terminal — HM's supported rollback,
+  reversible, so no typed-yes. System-level undo LINKS OUT by design:
+  Snapshots row → existing flow; "boot an older generation (how)" →
+  instruction notification pointing at docs/RECOVERY.md §3 (no
+  destructive reimplementation in rofi). RECOVERY §1 cross-references
+  the menu path. Item 9 complete → deleted.
+- **Verified:** V0; V1 — template-home built, generated nomarchy-menu
+  bash -n clean, row-render + pick-parse logic run against a fixture
+  `generations` output (id/path extraction correct). V2 skipped
+  deliberately: the only novel logic is the parsing (fixture-covered);
+  the activate step is HM's own mechanism. V3 queued.
+- **Pending:** V3 rollback-menu exercise on hardware.
+- **Next suggestion:** NEXT#10 `nomarchy-doctor` (V2-able in a VM).
+
 ## 2026-07-04 — sys-update/-rebuild what-changed diff (iteration #18, item 9a)
 - **Task:** BACKLOG NEXT#9 half (a) — a human diff after system rebuilds.
 - **Did:** both sys-update and sys-rebuild (twins stay twins) capture